Create Visual Validation Session

Create the real-person visual validation session before uploading reusable liveness_face materials. TokenLab uses the Volc Action API shape and TokenLab Bearer authentication.

Endpoint And Authentication

POST https://api.tokenlab.sh/api/v3?Action=CreateVisualValidateSession&Version=2024-01-01
Authorization: Bearer <TOKENLAB_API_KEY>
Content-Type: application/json

Volc AK/SK signing is not accepted. CallbackURL is required and must be a public HTTPS URL. ProjectName is optional and defaults to default.

Flow

Save Result.BytedToken and open Result.H5Link for the person being verified.
To select the H5 language, append lng to H5Link, for example &lng=en. The language is not a request-body field.
After the H5 flow finishes, the browser opens Result.CallbackURL. The callback query can contain bytedToken, resultCode, algorithmBaseRespCode, reqMeasureInfoValue, and verify_type.
Poll Get Visual Validation Result with the saved BytedToken until Result.GroupId is returned.

BytedToken is valid for 30 minutes and is scoped to the authenticated organization and ProjectName. The H5 link supports one completed authentication and becomes invalid after use. Treat Result.H5Link as an opaque browser URL: open it as a top-level page, and do not parse, decode, rewrite, or embed it. TokenLab owns the browser handoff and callback bridge.

Example Request

curl 'https://api.tokenlab.sh/api/v3?Action=CreateVisualValidateSession&Version=2024-01-01' \
  -H "Authorization: Bearer $TOKENLAB_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"CallbackURL":"https://yourapp.example.com/seedance/callback","ProjectName":"default"}'

Example Response

{
  "ResponseMetadata": {
    "RequestId": "req_abc123",
    "Action": "CreateVisualValidateSession",
    "Version": "2024-01-01",
    "Service": "ark",
    "Region": "cn-beijing"
  },
  "Result": {
    "BytedToken": "ZXhhbXBsZS10b2tlbg",
    "H5Link": "https://api.tokenlab.sh/api/v3/visual-validation/sessions/svv_example/h5?Version=2024-01-01",
    "CallbackURL": "https://yourapp.example.com/seedance/callback"
  }
}

Errors use the same top-level envelope. Read ResponseMetadata.Error.Code and ResponseMetadata.Error.Message instead of expecting the fields from TokenLab’s other /v1 APIs.

Get Video Status Get Visual Validation Result

Core

Text

Files & Batches

Images

Audio & Realtime

Music

Video & Materials

Worlds

3D

Async Jobs

Gemini Native

Management

Create Visual Validation Session

Endpoint And Authentication

Flow

Example Request

Example Response

​Endpoint And Authentication

​Flow

​Example Request

​Example Response

Endpoint And Authentication

Flow

Example Request

Example Response